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KATO’S EULER SYSTEM AND 
THE MAZUR-TATE REFINED CONJECTURE OF BSD TYPE 

KAZUTO OTA 


Abstract. Mazur and Tate proposed a conjecture which compares the Mordell-Weil rank of 
an elliptic curve over Q with the order of vanishing of Mazur-Tate elements, which are analogues 
of Stickelberger elements. Under some relatively mild assumptions, we prove this conjecture. 
Our strategy of the proof is to study divisibility of certain derivatives of Kato’s Euler system. 
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1. Introduction 

1.1. The Mazur-Tate refined conjecture of BSD type. Mazur-Tate [19] proposed a refined 
conjecture of BSD type, whieh predicts mysterious relations between arithmetie invariants of 
an elliptie eurve E over Q and Mazur-Tate elements eonstrueted from modular symbols. A 
Mazur-Tate element is an analogue of Stiekelberger element and refines the p-adie L-funetion 
of E. As the Bireh and Swinnerton-Dyer eonjeeture, the Mazur-Tate refined eonjeeture of BSD 
type eonsists of two parts. One eompares the Mordell-Weil rank with the “order of vanishing” 
of Mazur-Tate elements (the rank-part). The other deseribes the “leading eoeffieients” of the 
elements. The aim of this paper is to prove the rank-part under some mild assumptions. Here, 
we explain this part more preeisely (see Section 2 for the other part). 

Eor a positive integer S, we put Gs = Gal(Q(/X 5 )/Q). The Mazur-Tate element 9s is an 
element of Q[G 5 ] sueh that for every eharacter x of Gs, the evaluation x(^s') equals the al- 
gebraie part of L{E, x~^, 1) up to an explieit faetor. It is important that the denominators of 
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6 s are bounded as S varies, which implies the existence of non-trivial congruences between 
these special values as x varies. If is a strong Weil curve, then 9s G Z[l/tc{E)] [G 5 ], where 
t := |i?(Q)tors|> and c{E) E Z denotes the Manin constant, which is conjectured to be 1 in this 
case. 

Let Rhe a subring of Q such that 63 E i?[Gs'] for all 5 > 0. We denote by Is the augmen¬ 
tation ideal of and by sp(S') the number of split multiplicative primes of E dividing S. 

We put te = rank(i?(Q)). The following is the rank-part of the Mazur-Tate refined conjecture 
of BSD type. 

Conjecture 1.1 (Mazur-Tate). The order of vanishing of 6s at the trivial character is 
greater than or equal to te + sp(S'), that is, 

g jrB+sp(S) 

1.2. The main result. We suppose that E does not have complex multiplication, and we denote 
by N the conductor. Let i? be a subring of Q in which all the primes p satisfying at least one of 
the following conditions are invertible: 

(1) pdivides 6 iV-|i?(Fp)| : i?o(Q£)], where for a prime f, we denote by i?o(Q£) 

the group of points in E{Qe) whose reduction is a non-singular point of i?(F£), 

(ii) the Galois representation of Gq attached to the p-adic Tate module is not surjective, 

(iii) p <rE. 

The following is our main result. 

Theorem 1.2 (Theorem 6.1). Let S be a square-free product of good primes i such that for 
each prime p not invertible in R, the module E{¥fj\p\ is cyclic, that is, E{¥()[p\ is isomorphic 
to Z/pZ orO. Then, 6s E and Conjecture 1.1 holds, that is, 

6 s E IjT. 

Remark 1.3. (1) The density (if it exists) of primes f that satisfy the assumption of 

Theorem 1.2 is greater than 0.99 (see Remark 6.2 for the detail). We also note that each 
good supersingular prime i of E satisfies the assumption of Theorem 1.2. 

(2) We mention known results on Conjecture 1.1. When p is a good ordinary prime, Kato’s 
result ([11]) on the p-adic BSD conjecture proves that 6pn E Zp ® IpS for n > 0. 
Kurihara’s result in [15] implies that 63 E Zp ® where S does not need to be a 
power of p (cf. [15, Remark 2] and [19, Proposition 3]). However he was assuming the 
/i = 0 conjecture. For a supersingular prime p, in their unpublished work, Emerton, 
Pollack and Weston seem to have proved a similar assertion at least when S' is a power 
of p. Tan [29] proved Conjecture 1.1 for many S without extending the scalar to Zp. 
However, he was assuming tfvo full BSD conjecture not only over Q but also over cyclic 
extensions it' of Q inside Q(ps'). Note that Theorem 1.2 does not require the validity of 
any conjecture. 
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(3) It may happen that 6 s has an extra zero, that is, 6 s G (see Remark 2.5 and 

Theorem 7.1). 

(4) By Serre [26], there are only finitely many primes satisfying (ii). By [18, Lemma 8.18], 
if E{Q) has a non-trivial torsion point then there are at most three good primes p divid¬ 
ing |^(Fp)|. 

(5) The assertion that 6 s G is due to [28, §3] and (ii). 

By [5, Theorem 2] and [26, Theorem 4'], we have the following. 


Corollary 1.4. Wfe assume that E{Q) has a non-trivial torsion point. We put 


1 \ 2 


d = max N n( 1 + - j + 1 ^ R = Z[p ^]pis a prime less than d\. 

t\N 

Then, for every square-free product S of good supersingular primes, 6 s G /([Gs] and 

Os G Is ""- 


In this paper, we also give a partial evidence (Theorem 6.4) of the part of the Mazur-Tate 
refined conjecture which relates arithmetic invariants such as the Tate-Shafarevich group III to 
the leading coefficient of 6 s defined as the image 6 s of 6 s in The following is a 

special case of Theorem 6.4. 


Theorem 1.5. Let p be a prime not invertible in R and S a square-free product of good 
primes i such that 1=1 mod p and E{¥g) [p] is cyclic. If 6s ^ 0 mod p{rf^/then 

III[p] = 0 and p\ Js, 

where Js is the order of the cokernel of the map E{Q) —)■ (©£| 5 i?(F£))©(©£|Ari?(Q£)/i?o(Q£))- 

1.3. The plan of proof. We briefly explain how to prove Theorem 1.2. By a group ring theo¬ 
retic argument (Lemma 5.4), we are reduced to proving that 

(1.1) 6 s E Zp for all primes p not invertible in R. 

Let p be a such prime and rpoo the Zp-corank of the (discrete) Selmer group Sel(Q, E\p°°]). 

Our strategy of the proof of (1.1) is to show that Darmon-Kolyvagin derivatives of Kato’s 
Euler system are divisible by a power of p. In order to investigate the divisibility, we modify 
an argument of Darmon [6], who proposed a refined conjecture for Heegner points and proved 
an analogue of Conjecture 1.1 in many cases (see [16] for a generalization to Heegner cycles). 
Next, by modifying ideas of Kurihara [14], Kobayashi [13] and Otsuki [23], we relate Kato’s 
Euler system with Mazur-Tate elements. Then, the derivatives of Kato’s Euler system appear 
in the coefficients of the Taylor expansion of 6 s. By the divisibility of the derivatives and a 
group-ring theoretic argument, we show that 6 s belongs to a power of the augmentation ideal. 
However, our modification of Darmon’s argument implies only that 

( 1 . 2 ) 6 
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One might expect that Darmon’s argument implies that 6 s G The obstruction 

is the difference between the local condition at p of Heegner points and that of Kato’s Euler 
system. The localization of Heegner points at p obviously comes from local rational points (i.e. 
it is crystalline at p), and then Heegner points are related to the usual Selmer group. However, 
the localization of Kato’s Euler system does not necessarily come from a local rational point, 
and then we can relate Kato’s Euler system only with the strict Selmer group Hjp{Q, E\p°°]), 
whose local condition atp is zero. Since the corank of Hjp{Q, E[p°°]) is not necessarily greater 
than r pOO — 1 ^ we have only (1.2). 

Our idea for deducing (1.1) from (1.2) is to apply the p-parity conjecture, which is now a 
theorem (cf. [8], [12], [22]). It asserts that r-poc = ords = i { L { E , s )) mod 2. On the other hand, 
the functional equation of 6 s implies that if 6 s G (Zp 0 J|) \ (Zp (g) Is^^) for some 6 > 0 then 
b = oTds=iL{E, s ) mod 2. Combining these congruences with (1.2), we deduce (1.1). 

Remark 1.6. Divisibility of derivatives of Euler systems plays an important role in the 
proof of not only Theorem 1.2 but also other theorems. By investigating such divisibility, in 
this paper, we also show Theorems 1.5 and 4.20. The latter theorem gives a construction of 
Q-rational points of E (modulo p) from certain indivisibility of Euler systems. 

Notation. Throughout this paper, let E be an elliptic curve over Q of conductor N without 
complex multiplication. We put = rank(i?(Q)) and mg = [i?(Q£) : i?o(Q£)]- 

Eor an abelian group M and an integer n, we write M/n = M/nM. We denote by Mtors the 
maximal torsion subgroup of M. 

Eor a field K, we denote by Gk the absolute Galois group Gcd{K/K), where it' is a separable 
closure of K. We fix embeddings Q C and Q Qp for every prime p. Eor an integer S, 
weputCs = exp(27ri/S') and Gs = Gal(Q(Cs')/Q). 

Acknowledgements. This paper is based on the author’s thesis. He would like to express 
his sincere gratitude to his advisor Professor Shinichi Kobayashi for his insightful advice and 
discussion. Part of this work was completed while the author was visiting I’lnstitute de Math- 
emetiques de Jussieu with a support by the JSPS Strategic Young Researcher Overseas Visits 
Program for Accelerating Brain Circulation. He is deeply grateful to Professor Jan Nekovaf 
for his hospitality. Thanks are due to Professor Masato Kurihara for informing the author of 
his work related to the Mazur-Tate refined conjecture. The author would like to thank Matteo 
Eongo for discussion, and Chan-Ho Kim for showing his note of talks by Robert Pollack. This 
work was supported by Grant-in-Aid for JSPS bellows 12J04338. 


2. Mazur-Tate elements 

In this section, we recall the definition of Mazur-Tate elements, and we briefly review the 
Mazur-Tate refined conjecture of BSD type in a simple case. 
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We fix a global minimal Weierstrass model of E over Z and the Neron differential co. Then, 
we have a natural map from the first homology group Hi{E{C),Z) to C 

H^{E{C),Z) ^ C; f u. 

J-y 

We denote by A the image of this map. Let > 0 be the largest numbers such that 

A C Zf]+ ©Zfi". 

By [31], [30] and [4], let f{z) = X]n>i exp(27rm2:) be the newform corresponding to E. Let 
L{E, s) = ann~^ be the Hasse-Weil L-function of E. For a Dirichlet character x, we put 
L{E, X, s) = J2n>i For integers a and S with S' > 0, we define [a/S]^ G M by 


27r 


f f + it) dt = 

' a~ 

"^ 0 + -f 

'a' 

Jo J 

-S. 

E 

-5- 


Q- 


The Manin-Drinfeld theorem ([9], [17]) implies that [a/S']^ G Q. In the terminology of [20], 


( 2 . 1 ) 


A(/, = 


A, 


12+ + 


[S'] E 


Q- 


Definition 2.1. For a positive integer S, we define an element 9s of Q[G 5 ] by 




[S'! B [S'! B 


£ Q[Gs]; 


where 6 a G Gs is the element satisfying 6 aCs = Cs- We call 9s the Mazur-Tate element. 

Remark 2.2. Our 9s slightly differs from the original Mazur-Tate element, which is called 
the modular element in [19]. The image of 2^5 in Q[Gal(Q(/i 5 )+/Q)] coincides with their 
modular element, where Q(/i 5 )+ is the maximal totally real subfield of Q(/js). 

For n\m, we denote by Tr^/n the map Q[Gm] —>■ Q[G„] induced by the natural surjection 
Gm Gn- For a character x of G 5 , we put 

Tsix) = a(7)Cs- 

7GGs 

In this paper, square-free integers S are of particular interests. By (2.1) and [20, Chapter 1, §4 
and § 8 ], we have the following. 

Proposition 2.3. (1) Let S be a positive integer and i a prime not dividing S. Then, 

7^se/s9se = -FTe{l - aeFrJ^ + €{i)FTj^)9s, 

where e is the trivial Dirichlet character modulo N, and Fr^ denotes the arithmetic 
Frobenius oft 

(2) For a character x of Gs with conductor S, we have 

L{E,x-\l) 


X{0s) = Tsix)- 


Ox(-i) 
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We briefly review the Mazur-Tate refined conjecture of BSD type. Let S' be a square-free 
positive integer and i? a subring of Q such that I i?(Q)tors I ^ and 6^5 G For simplicity, 
we assume that S is relatively prime to N. If 9s E Is^, then we denote by 6^5 the image of ^9s in 
where Is+ denotes the augmentation ideal of i?[Gal(Q(/i 5 )+/Q)]. We note that our 
9s coincides with the leading coefficient considered in [19] (cf. Remark 2.2). For each positive 
divisor T of S, we denote by Jt the order of the cokemel of the natural map 

-^(Q) {®e\TE(^e)) ® {®e\NE{Qi)/E q^Q^)^ . 

Conjecture 2.4 (Mazur-Tate). Let S be a square-free positive integer relatively prime to 
N. Then 9 s G the Tate-Shafarevich group III ofE over Q is finite and 

h = |m|. y] Mdr)) e 

T|5>0 

where u(T) denotes the number of primes dividing T. See [19, (2.5), (2.6), (3.1)] for dr, ps,T 
and prE- 

Remark 2.5. (I) It may happen that 9s G some cases where it happens. 

(a) It is known that if IG 5 I G then Is = = Is ~ ■ 

(b) Let f be a prime with = 2. Even if te = 0, Proposition 2.3 (I) implies that 

9e G R. For example, if E is defined by the equation y'^ + y = — x'^ — 2x 1, 

then te = 0 , and the primes i < 100000 satisfying = 2 are f = 2, 3, 5, 251, 
983, 1009, 1051, 1669, 8219, 9397, 10477, 11789, 14461, 21773, 24019, 32117, 
51239, 57737, 93199, 95747, 97859, 98711. The calculation is due to Sage [27]. 

It may also happen that the element PrEids^Tidr)) E is trivial. Bertolini- 

Darmon [2] constructed a certain lift of prE{ds,T{dT)) to /^+, which gives extra infor¬ 
mation in this case. 

(2) See [19, Conjecture 4] for more general cases. Although Conjecture 2.4 might look 
different from [19, Conjecture 4], it is not difficult to check that they are equivalent. 

3. Darmon-Kolyvagin derivatives and Euler systems 

In this section, we fix notation on derivatives and Euler systems, and recall their properties. 
We fix a prime p > 5. Eor an integer S, we denote by Q(S') the maximal p-extension of 
Q inside Q(Cs) and put F^ = Gal(Q(S')/Q). Eor relatively prime integers m and n, by the 
canonical decomposition F^n = F^ x r„, we regard F^ and F„ as subgroups of F^n 

3.1. Darmon-Kolyvagin derivatives. Following [6], we introduce derivatives which we call 
Darmon-Kolyvagin derivatives as in [16]. 

As usual, for integers J> 0 and k > 1, we put 

f j\ ^ j{j - 1) • • • (j - fe + 1) 

VV k\ 
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We put (q) = 1 for j > 0. For an element cr G r 5 of order n and for an integer /c > 0, we define 

n-l ^ .X 

dP = Qy’ e z[rs]. 

We note that = 0 if k > n. For /c < 0, we define = 0. 

Lemma 3.1. If a ^Ts is of order n and 1 < k < n — 1, then 

(a - 1)D<'=I = Q - 

In particular, ifn is a power q ofp and ft < k < p, then we have 

(a - mod q. 

Proof. This is proved by a straightforward computation. For the second assertion, note that 
(^) = 0 mod q when 0 < A; < p. □ 

Definition 3.2. In the following, we fix a generator ai of F^ for each prime i, and write 
. Let 5 > 0 be a square-free integer. We call an element D of Ifffs] a Darmon- 
Kolyvagin derivative, or simply, a derivative if D is of the following form: 

-LITsi 

where ,..., are distinct primes dividing S, and each ki is an integer such that 0 < ki < | F^J. 
We note that fi,..., /ci,..., are uniquely determined. We define 

Supp(ii)) = Hi - ■ -dsi Cond(ii)) = fj, 

ki>Q 

which we call the support and the conductor of D, respectively. We put 

ord(L)) =/ci H- fks, n(L)) = min{|r<>,|}, eefD) = ki. 

ki>0 

We call ord(Zi)) the order of D. Since F^ is a p-group for each prime i, the natural number n{D) 
is a power of p. When ki = 0 for all i, we define n{D) = 1. When S = fi • • • we define the 
norm operator as 

Ns = Df ■ ■ ■ Bf, 

Let S' be a square-free positive integer and M a Zp[rs]-module without p-torsion. We take 
an element a e M, and put 

0 = ^ 70 0 7 e M <S)Zp^p[^s]- 

The element 9 has a Taylor expansion as follows. 
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Proposition 3.3. Let S = ii ■■■ is be the prime factorization of S. Then, we have 


6 = ^ Dka 0 - 1 )^", 

k={ki,...,ks)e'Zf‘^ 

where '■= far k = {ki ,..., kg). 

Remark 3.4. We note that = 0 for all but finitely many k G Z®g 

Proof. We prove the proposition by induetion on the number of primes dividing S, 

We first assume that S' is a prime i and put a = Sinee is generated by a, we have 


Fd-i 

9 = fa a 0 fa. 

j=0 


For eaeh j, we note that 


fa = (a 


k=0 




fc >0 


Henee, we have 


Fd-i 

j=0 


fa a fa = > fa a 


Ti\-i 

fa a 0 

j=0 k>0 

Fd-i . 

J 
k 


Fd-i 

^ V - 1)^ = ^ ^ a^a 0 (a - 1)' 


fc>0 3=0 


® 0 (fr - 1)' 


j=0 fc>0 
fk) 


k>0 


Then, we eomplete the ease where S' is a prime. 

In the general ease, we put T = S/fa. Then, we have 

9 = y^ 7i7a 0 77i. 

7ier^j^ 7Gry 

By the induetion hypothesis. 


y^ 7 a 07 = F>fc/a0 (a£2 - - 1)^ 

Tew fc'=(A:2,...,fcs)ez®®-i 
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Hence, we have 

9 = ^ ^ 7i7a (g) 77i 

7€r'r 

= - 1)^" ■■ ■ 
fc'=(fc2,...,fc7€Z®®-l 

= X] % X] 7ia ® 7i(f^fe - 1)^" ■ ■ ■ - 1)^" 

fc' TlGT^l 

- E E '^7'“ ® 

u fei>o 

= X] ^fea«)(o-7-1)^% 

fc=(A:i,...,fcs)€Z^g 

where the equality (*) also follows from the induction hypothesis. □ 

Lemma 3.5. Let G be a finite abelian p-group and a an element ofG with order q. Then, 

q{(y-l) e Jg, 

where Iq denotes the augmentation ideal o/Zp[G]. 

Proof. This is [6, Lemma 3.5]. □ 

Combining Proposition 3.3 and Lemma 3.5, we have the following. 

Lemma 3.6. Let t > 1. Assume that for all Darmon-Kolyvagin derivatives D such that 
Supp(i7) = S and ord(Zi)) < min{f,p}, we have Da = 0 mod n{D). Then, 

Remark 3.7. This is [6, Lemma 3.8]. It seems that there is an error in the statement of [6, 
Lemma 3.8]. However, the error is not crucial when we consider Euler systems. 

Proof. As in Proposition 3.3, we write 

(3.1) 9 = 

k={ki,...,ka)&'Z^Q 

We pick an element = {ki,kg) ^ Z^g\{0,..., 0} such that ki-\ - \-ks < min{f,p}, that 

is, 0 < ord(i7fc) < min{f, p}. By the definition of n{Dk}, there exists i such that iTuI = n{Djf) 
and ki > 0. Since Dta = 0 mod n{Dff), Lemma 3.5 implies that 

(3.2) D^a 0 (a,, - 1)^^ ■ ■ ■ (a,, - 1)"^ 

This holds for each such that 0 < ord(i7fe) < min{t,p}. By (3.1), we complete the proof. 

□ 
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3.2. Preliminaries on Galois cohomology. We denote by T the p-adic Tate module Tp{E) of 
E. In the rest of Section 3, we assume that the Galois representation p ; Gq —)■ Autzp(T) is 
surjective. Then by [25, Proposition 3.5.8 (ii)], there exists an element r G Gal(Q/Q(/rpoo)) 
such that 

(3.3) T/(r - 1)T = Zp. 

Proposition 3.8. For a power q of p and a finite abelian extension E of Q, we have 
E{E)[q] = 0. Moreover, the restriction map induces an isomorphism 

Bfel) = (F/Q, H‘(F, £[?])) . 

Proof. For the first assertion, we only need to show that E{E)[p] = 0. We assume that 
E{E)[p] 7 ^ 0, and take a non-trivial point P G E{E)[p]. Since the Galois representation 
Gq —)■ Autz/pz(A^[p]) is surjective, for each non-trivial point Q G E[p] there exists an ele¬ 
ment a G Gq such that aP = Q. Since the extension F/Q is a Galois extension, we have 
Q G E{P)[p]. Thus, Q(F[p]) C F, which implies that Gal(Q(F[g])/Q) is abelian. However, 
since Gal(Q(F[p])/Q) = GL 2 (Z/pZ) is not abelian, we have a contradiction. Then, we show 
that F(F) [q] =0. The second assertion follows from the exact sequence 

0 ^ H\E/Q,E{E)[q]) ^ H\Q,E[q]) ^ {E/Q, H\E, E[q])) ^ H\E/Q, E{E)[q]) 

which is induced by the Hochschild-Serre spectral sequence. □ 

For a torsion module M and an element b G M, we denote by ord( 6 , M) the order of b. 

Lemma 3.9. Let q be a power ofp and L a finite Galois extension ofQ such that Gl acts 
trivially on E[q\. Then for K,rj E FQQ, E[q]), there exists an element 7 ofGi such that 

(1) ord(N( 7 r),F[g]/(r-l)F[g]) > ord(N, FQL, F[g])), 

(2) ord ( 7 ( 7 r), F[g]/(r - l)F[g]) > ord(r/, FQL, F[g])), 

where r is as in (3.3), and we regard k, p as elements of H^(L, E[q])) by the restriction map 
H\q,E[q]) ^ H\L,E[q]). 

Remark 3.10. For y E Gl and n E F^(Q, F[g]), the image of K(yT) in E[q ]/(r — l)F[g] 
is independent of the choice of a cocycle representing n. 

Prooe. This is [25, Lemma 5.2.1]. □ 

3.3. Euler systems. For a prime we define Pe{t) E Z[t] by 

(3.4) Pi(l) ~ ~ F 1 

where and e are as in Section 2. Let S be a finite set of primes which contains all the primes 
dividing pN. We put 

^ = {primes I ^ S}, jV = (square-free products of primes in U {!}. 
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Definition 3.11. We call {zspr<-}s£.j^,n>o ^ Hsn an Euler system (for T 
and if {zsp^^} satisfies the following conditions. 

(1) For S E a prime i E ^ not dividing S, and n > 0, we have 


CoTse/sZsip^ = Pe(Pr^ ^)zsp^, 

where Covsep^/sp" ■ H^{Q{Sip'^),T) -E H^{Q{Sp'^),T) denotes the corestriction 
map, and Fr^ E Tsp^ denotes the arithmetic Frobenius at 
(2) For S E jV , the system {zspr<^}n>o is a norm compatible system, that is, 

{^Zgpn ]• n>0 El^H\Q{Sp^),T), 

n 

where the limit is taken with respect to the corestriction maps Cor^pn+i/^pn. 


Remark 3.12. Our definition of Euler system slightly differs from the usual definition in 
[10], [24] and [25]. In the usual definition, instead of the condition (1) in Definition 3.11, every 
Euler system is required to satisfy 


Slp'^/Sp" i^Zglpn 



f 

+ 



Zsp'T -. 


However, since F[(f) = (l — yf + mod £ — 1, by [25, Eemma 9.6.1], the existence of 
an Euler system in our sense is equivalent to the existence of an Euler system in the usual sense. 


Eor a local field K and a topological module M with a continuous Gi^-action, we put 

Hl{K, M) = ker M) -E M)) . 

Proposition 3.13. Let {zsp^} be an Euler system and \\paprime of Q. Then,for S E JE 
and n > 0, the image 1oca(;2sp") of zsp^ in H^{Q{Sp'^)\, T) is unramified, that is. 


locxizspr^) E Hl{Q{Sp^)x,T), 

where Q(S'p”)a denotes the completion at the prime ofQ{Sp^) below A. 

Prooe. This is [25, Corollary B.3.5]. □ 

3.4. Local behavior at primes not dividing p. In this subsection, following [25, Chapter 4], 
we study local behavior of derivatives of Euler systems at primes not dividing p. 

Eet g be a power of p and {zsp^^},n>Q an Euler system. Eor an integer S E JE, an 
element x E H^{Q{S), E[q]) and a prime A of Q(S'), we denote by locA(a;) the image of x in 
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3.4.1. Unramifiedness of derivatives at primes not dividing conductors. For a prime we put 
rui = [i?(Q£) : i?o(Q£)]- We assume that 

P \ 6 -^ 

e\N 

Proposition 3.14. Let D be a Darmon-Kolyvagin derivative with support S and conductor 
S'. We assume that Dzs mod q G {Ts, H^{Q{S),T)/q) and denote by k E i?[g]) 

the inverse image of Dzs mod q G E[q]) under the isomorphism {cf. Proposition 

3.8) H^{Q, E[q]) = E[^ {Ts, H^{Q{S), E[q])). Then for every prime I \ pS', 

\oce{K) G i/u,(Q^,.E[g]). 

Remark 3.15. By taking Galois cohomology with respect to the exact sequence 

0 ^ T ^ T ^ E[q] -y 0 , 

we have an inclusion H^{Q{S),T)/q ^ H^{Q{S), E[q]), by which we regard Dzs mod q as 
an element of H^{Q{S), E[q]). 

Proof. First, we suppose that i f pS. Since the extension Q(S')/Q is unramified at i, we 
have (Q(S')a)“ = Q” for a prime A|f. Hence, we have hcein) = \ocx{Dzs) as elements of 
E[q]). Then, by Proposition 3.13, we have Ioc£{k) G E[q]). 

We next consider a prime i dividing S/S'. Then we have 

Dzs = D'N^zs = ^)D'zsii., 

where D' is a derivative such that Supp(Zi)') = S/ ^. Since the extension Q(*S'/f)/Q is unram¬ 
ified at for a prime A of Q(S'/f) we have loc£(fi;) = \oc\{D'P£{Yif^)zs/£) as elements of 
/f ^(Q“, E[q\). Then by Proposition 3.13, we complete the proof. □ 

Corollary 3.16. Under the notation as above, for every prime i \ pS', we have 

1 oq ( k ) G E{Q£)/q, 

where Eif^fjjq is regarded as a subgroup o/if^(Q£, E[q\) by the Kummer map. 

Proof. Our proof is based on that of [6, Theorem 4.9]. By the exact sequence 

0 ^ E{Qe)/q -y H\Q£,E[q]) -y H\Q£,E)[q] -y 0 , 

it suffices to show that the image \oc/f^e{K) of k in H^{Q£, E)[q] is trivial. Proposition 3.14 
shows that loc//,£(fi;) G iF^(Q“/Q£, i?(Q“))[g]. Since (if f f iV, then = 1), by using 
[21, Chapter I, Proposition 3.8], we have 

H\QY/Qe,E{Qf))[q] = 0, 


and hence \oc/= 0. 


□ 
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3.4.2. Local behavior at primes dividing conductors. We put 

■ q\l- 1 }, q\Pf.{^)]. 

(3.5) 

jLq = {square-free products of primes in 
We take an integer S G 

Definition 3.17. For a positive divisor S' of S, let xs' denote an indeterminate. We denote 
by Ys the free Zp[r 5 ]-module generated by {a;s/}s/| 5 >o, that is, Ys = ®5'|s’>o^p[r5]a^s'- We 
denote by Zs the Zp[r 5 ]-submodule of Ys generated by the following elements: 

axs' — xs' for S'\S and a G F s/s': N^xs'e — P£(FtJ^)xs' for primes i with iS'\S. 

We define Xs = Ys/Zs- 

If we regard zs' as an element of H^{Q{S),T) for S'\S by the restriction map, then there 
exists a unique homomorphism of T 5 -modules 

gs:Xs^H\Q{S),T) 

sending xs' to zs' for S'\S. 

Let g be a power of p, and we put Mq = Ind^{j(i7[g]). We recall that the GQ-module 
Ind^{|(i7[g]) is defined as the module of continuous maps from Gq to E[q], and Gq acts on 
Ind^{|(i7[g]) by {af){g) = f{g<j) for a,g E Gq. Then we have an exact sequence of Gq- 
modules 

0 —)■ E[q] -E- Mq —)■ Mq/E[q] —)■ 0, 

where the map E[q] —)■ Mq is defined as y 1 —)■ (g i-G- gy). For a finite extension L of Q, by taking 
Galois cohomology, we obtain an exact sequence 

(3.6) 0 ^ E{L)[q] -E Mf^ -E {Mq/E[q]f^ ^ H\L,E[q]) -E 0. 

See [25, Proposition B.4.5] for the surjectivity of the connecting map 5l. 

Proposition 3.18. There exists a Ts-homomorphism dsfrom Xs to (Mg/i7[g])'^*J(®) mak¬ 
ing the following diagram commutative: 



Proof. This is [25, Proposition 4.4.8]. 


□ 


We take a prime i G fiE,q which splits completely in Q(S'). We denote by C Gq a 
decomposition group of i, and by C the inertia group. Then, the natural map ^ 
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is surjective. We fix a lift of an to J'l, which we also denote by an- We fix a lift Fr^ G ^n of the 
arithmetic Frobenius at t. By abuse of notation, we put 

ni-\ 

N, = Y,a'„ 

i=l i=0 

where nn := IF^I. Then we have 

(3.7) {an-l)D^n''^ =nna^^-Nn inZ[,/,]. 

Let Hj{Qn., E[q]) denote the image of the Kummer map E{Qn)/q —)■ H^{Qn, E[q]). We put 
H}f{Qn,E[q]) = H\Qn, E[q]) / Hj{Qn, E[q]), 

which is isomorphic to H^{Qn, E)[q]. It is known that Hj{Qn, E[q]) = Hl^{Qn, E[q]), and 
hence E[jj{Qn, E[q]) = E[q]). By [25, Lemma 1.4.7 (i)], we have two isomorphisms 

an : Hj^iQn, E[q]) = E[qf^^=^- c ^ c{an), 

/3n : Hj{Qn,E[q]) - i7[g]/(Fr, - l)E[q]- c ^ c(Fr,), 

where each element c e H^{Qn, E[q]) is regarded as a cocycle. Here, we note that the map an 
depends on the choice of an- Since i E ^E,q, we have ^^(1) = 2 — = 0 mod g, and then 

an = 2 mod q. Hence, Pn{t) = {t — 1)^ mod q. Since Pn{t) = detzp(l — Fr^flT) mod q, we 
have Pn{FrJ^)E[q] = 0. Therefore, if we put Qn{t) = t — 1, then we have a homomorphism 

QniFii^) : E[q]/{FTn - l)E[q] -E E[qf^^=\ 

We define a homomorphism 

: Hj{Qn,E[q]) ^ H}f{Qn,E[q]) 

as the composite 

H}{Qn,E[q]) % E[q]/{FTn - l)E[q] E[qf'^^=^ ^ Hj^iQn, E[q]). 

For each Darmon-Kolyvagin derivative D, we fix a lift D to Z[Gq]. 

Theorem 3.19. Let S be an element of jFp and q a power ofp. Fie take a prime i E I^E,q 
which splits completely in Q(S'). Let A be the prime o/Q(S') above i corresponding to the 
decomposition group Ffn ofQ. For a Darmon-Kolyvagin derivative D whose support is S, we 
have the following. 

(1) 1oca(7^;^s mod q) E 77)(Q(^)a, E[q]) = 77)(Q,, E[q]). 

(2) DDfhst mod q E 77° (F,, 77HQ(^7), T)/g). 

(3) If kF') e 77^(Q(S'), 77[g]) denotes the inverse image of DD^pzsn mod q under the iso¬ 
morphism 77^(Q(S'), 77[g]) = 77° (F^, 77^(Q(S7), 77[g])) and 1oc//^a(^*'^^) denotes the 
image ofn^'i in 77^^(Q^, 77[g]), then we have 

loc/f^xi^F)^ = (j)f\locx{Dzs mod g)). 
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(4) In addition, if E[q\/— f)E[q\ = 'L/qL, then 

ord(locA(K(^^),i?^(Qf,^)[g]) = ord{locx{Dzs), H^iQe, E[q])). 

Proof. We follow the proof of [25, Theorem 4.5.4]. The assertion (1) follows from Propo¬ 
sition 3.13. By Lemma 3.1, we have 

{ae - l)DDf ^xse = -a^DNiXsi = -aiDP(,{Yif^)xs = -aiDPi,{l)xs = 0 mod qXsi, 

where the third eongruenee follows from Fr^ = 1 in F^, and the last eongruenee follows 

f 1) r 

from ^ e dfE,q- Henee, DD\ ’xst mod q G {Xst/q) f Sinee a homomorphism dst as in 
Proposition 3.18 is G(Q-equivariant, we have dsi^DOf'xsf) G Ff°(F£, {Mq/E[q])^'^<^st)f Sinee 
5ii{st){dst{xsi)) = zsi mod q, we have 

DDfzsi mod q G (F,, H\Q{Si), T)/ q) . 

We take lifts d{xse), d{xs) G Mq of dsi{xse), dse{xs), respeetively. By the definition of 
it suffiees to show that 

(3.8) QeiFrf^) {{Dzs mod g)(Fr^)) = G E[q], 

where we regard Dzs and k as eoeyeles. Sinee 5q(^s) is the eonneeting map from {Mq /F'[g] )'^*J(s) 
to H^{Q{S), E[q]), we have 

(3.9) {Dzs mod g)(Fr£) = (Fr^ - l)Dd{xs), = (a^ - l)E^/^E)d(xse) G E[q]. 

Sinee Q(,{Yif^){Yif^ — l)E[q] = Pi{Yif'^)E[q] = 0, we have 

Qf,{Yif^) {{Dzs mod g)(Fr£)) = {{Dzs mod g)(Fr£)). 

Thus, by (3.9), (3.7) and [25, Lemma 4.7.1], we obtain 

Q(,{¥i^^){{Dzs mod (?)(Fr£)) - 

= Qi{Yif^)Yif^{{Dzs mod g)(Fr£)) - 

= g,(Fr7i)Fr7^(Fr, - l)Dd{xs) - {a, - l)DfDd{xsd 

= -P(,{¥if^)Dd{xs) + NeDd{xse)- 

By [25, Lemma 4.7.3], this is zero, and then we eonelude (3.8). 

If E[q]/ (Fr^ — l)E[q] = Z/gZ, then [25, Corollary A.2.7] says that is an isomorphism, 
and henee the assertion (4) follows. □ 

4. Divisibility of Euler systems for elliptic curves 

In this seetion, we show that eertain derivatives of Euler systems are divisible by a power of 
p (Theorem 4.9), and give applieations. 

We keep the notation as in Seetion 3. In partieular, let {zspr^}sexr,n>o be an Euler system for 
T and some in the sense of Definition 3.11. 
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4.1. The theorem on divisibility of Euler systems. The aim of this subsection is to prove 
Theorem 4.9. We also give a modification (Theorem 4.15) of Theorem 4.9, which is used to 
prove Theorems 4.20 and 6.4. 

4.1.1. Notation. 

Assumption 4.1. Throughout Section 4, we assume that p \ 6N that the Galois 

representation Gq —)■ Autzj,(T) is surjective. 

Let g be a power of p. 

Definition 4.2. For a finitely generated Zp-module M, we define an integer rg{M) by 

M ® Z/qZ ^ © M', 

where the exponent of M' is strictly less than q. 

Lemma 4.3. For an exact sequence of finite Z/qZ-modules 0 —)■ M' —)■ M —)■ M", we have 

r,(M) <r,(M')+rp(M"). 

Proof. This is [6, Lemma 5.1]. □ 

Definition 4.4. We define the Selmer group Sel(Q, E[q\) by 

Sel(Q.£|,l) = ke.Yff‘(QAbl)- n ) ■ 

and for a positive integer S, we define a subgroup E[q]) of Sel(Q, E[q]) by 

(4.1) HlsiQ,E[q]) = ker (Sel(Q,E[g]) ^ ®eisEm/q) , 

where i ranges over all the primes dividing S. If there is no fear of confusion, we simply write 

H},s = HlsiQ.E[q]). 

Weput Ag(S') = ®eisE{Qe)/q. 

Lemma 4.5. Let S be a positive integer and I \ S a prime such that E{f^fj/p is cyclic {i.e. 
the module Eif^fjjp is trivial or isomorphic to ZjpZ). Then, we have 

(4.2) TgiHlst) + - 1 < Tg{Hls) + 

In addition, if Eifi^fj/p = Z/p, then we have 

(4.3) Tg{Hls) + rM,iS)) < rg{Hls^) + T,{Ag{S^)) 

Proof. Since C Hjg and rp{Aq{St)) < rp{Aq{S)) + 1, we have (4.2). We assume 
that E{Q()/p = Z/p. By Lemma 4.3 with the exact sequence 0 —)■ —)■ Hj g E{Qfj/q, 

we have 


rqiHjs) < rqiHjse) + rp{E{Qe)/p) = rq{H}s^) + 1 . 
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Since rp{Aq{S)) + 1 = rp{Ag{Si)), we deduce that 

rqiHjs) + rp{Aq{S)) < rq{Hjse)+rp{Aq{Si)). 

□ 

Definition 4.6. Let S G ^ (see (3.5) for the notation). For a Darmon-Kolyvagin deriva¬ 
tive D whose support is S, we define the weight of D as 

w{D) = ord(ii)) — Ijf e divides S'}]. 

Remark 4.7. In Darmon’s argument, the notion of weight also played an important role. 
We modify his weight for our case. 

Proposition 4.8. Let D be a Darmon-Kolyvagin derivative with support S. Suppose that 
S G JVq. Ifw{D) < 0 and max£|s'{e£(Zi))} < p {see Definition 3.2 for efiD)), then we have 

Dzs = Q mod qH\Q{S),T). 

Proof. We note that the assumption w{D) < 0 implies that there exist a prime ^ G 
dividing S and a derivative D' such that 

(4.4) D = D'Ne Supp(D') = S/i, ord(D') = ord(D). 

We prove the proposition by induction on the number of primes dividing S. If S' = f is a 
prime, then i G ^E,q and D = Ng. Since A(l) = 0 mod q, we have 

Dze = Neze = Pe(FTf^)zi = Pe{l)zi = 0 mod q. 

In general, since w{D) < 0, there exist a prime i G ME,q dividing S and a derivative D' as 
in (4.4). Then, we have 

w{D') = ord(i7') — |{f' G ffE,f divides S/P\\ 

= ord(Zi)) — \{fi G ME,qi divides S'}] + 1 
= w{D) + 1 < 0. 

We write S'/f = • • • fa- We show that 

(4.5) (a^. — l)D'zs/t = 0 mod q for 1 < i < a. 

It suffices to consider the case 7 = 1. We write D' = \ In the case where ki = 0, 

we have D' = ■ ■ ■ Dff \ Hence, the claim (4.5) is clear. We may assume that ki > 1. 

Since the order of is divisible by q and d < ki < p. Lemma 3.1 implies that 

(4.6) (a,, - l)D' = ) ■ ■ ■ off mod q. 

We have 

= Sji, = w{D') - 1 < 0 . 
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Then, the induetion hypothesis implies that ■ ■ ■ Dff’zsit = 0 mod q, and hence 

by (4.6), we deduce (4.5). 

Since each T^. is generated by a^., the assertion (4.5) implies that 

D'zs/e mod q G (T^/,, H\Q{S/i),T)/q) . 

Hence, we have 

Dzs = D'NeZs = Pe{Fr~^)D'zs/e = Pe{l)D'zs/i = 0 mod q. 

□ 

4.1.2. The proof and an application. 

Theorem 4.9. Let q be a power ofp and D a Darmon-Kolyvagin derivative with support S 
satisfying max£| 5 '{e£(D)} < p. We suppose that S G ^ and for every prime l\S, E{¥fj\p\ is 
cyclic, that is, E{¥()\p\ = 0 or E{¥f)\p] = Z/pZ. Ifoi(\.{D) < {^Hjp{Q,E[q])'j, then 

Dzs = 0 modqH\Q{S),T). 

We prove it by induction on w{D). Before the proof, we prove some lemmas. 

Lemma 4.10. Let D be a Darmon-Kolyvagin derivative with support S. We suppose that 
S G and Dzs mod q G {T S) /q). We denote by k the inverse image of 

Dzs under the isomorphism H^{Q, E[q\) = {Ts, E[q])). We put S' = Cond(Zi)). 

If rq{Hj E[q])) > 0, then there exists a prime f G ^ such that 

(1) f = 1 mod q, I splits completely in Q(S'), and E{Q^f)/q = Z/gZ, 

(2) ord(L> 2 : 5 ,iT^(Q(S'),T)/g) = ord(locf(fi;), iT^(Q£, .E[g])), 

(3) the localization map HjpgfQ, E[q]) —)■ E{Qi)/q is surjective. 

Prooe. By the natural inclusion iJ^(Q(S'), T)/g H^{Q{S), E[q]), we have 

(4.7) oTd{Dzs,H\Q{S),T)/q) =oTd{K,H\Q,E[q])) . 

We put d = Old {n, H^{Q, E[q])). Since rg{Hj^pg,{Q, E[q])) > 0, there exists an element 
p G Hj pgfQ, E[q]) of order g. We put L = Q(S')(i7[g]) (the composite of Q(S') and Q(i7[g])). 
Since {S,pN) = 1, we have Gal(L/Q) = Gal(Q(S')/Q) x Gal(Q(i7[g])/Q). By [3, Proposi¬ 
tion 6.3 (2)], we have 

H\L/Q{S),E[q]) - H\Q{E[q])/Q,E[q]) = 0. 

Then, the restriction map H^{Q{S), E[q] ) —)■ (L, E[q] ) is injective, and hence by Proposition 
3.8, the restriction map H^{Q, E[q]) —)■ H^{L, E[q]) is injective. Therefore, the image of n in 
H^{L, E[q]) is of order d and the image of p is of order q. For r G as in (3.3), by 

Lemma 3.9, there exists an element 7 of such that 

(4.8) ord(K( 7 r), E[q]/{T - l)E[q]) = d, ord{p{yT), E[q]/{T - l)E[q]) = q. 
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We note that H^{L, E[q]) = Hom(Gx,, E[q]). We regard k, rj as elements of Hom(Gi, E[q]) 

_ ^ 

and put E[ = ker(/T;) nker(r 7 ) C Gl- Let L' be a finite Galois extension of Q containing Q . For 
a G Gq, we denote by [a] the conjugacy class of the image of a in Gal(L7Q). By Chebotarev’s 
density theorem, there exists a prime f G ^ not dividing pNS such that 

(4.9) [Fr<.] = [ 7 r]. 

It remains to show that this ^ satisfies the conditions (1), (2) and (3) above. 

(1) . Since 7 r = 1 in Gal(Q(S')(/jg)/Q) (recall that Q.{jJiq) E Q(E[g]) by the Weil pairing), 
we have 1=1 mod g, and ^ splits completely in Q(S'). By (4.9), we have Fr^ = aTa~^ in 
Gal(Q(E[g])/Q) for some a G Gal(Q(F'[g]/Q). Thus, by 7 r = r in Gal(Q(F'[g])/Q) and 
(3.3), we have 

H\¥,,E[q]) = E[q]/{Yi, - l)E[q] = E[q]/a{T - l)E[q] = Z/gZ, 

where the first isomorphism is given by / i—)■ /(Fr^) mod (Fr^ — l)F'[g]. Since 

E(Q,)/g = H\¥,, E[q]) in E[q]), 

we deduce that the condition (1) holds. 

(2) . By Proposition 3.14, the image loQ(fi;) of n in E[q]) belongs to E[q]). 

By the isomorphism H^(¥i, E[q]) = E[q]/ (Fr^ — l)F'[g] and (4.7), it suffices to show that for a 
lift Fr^ G Gq of the arithmetic Frobenius at i, 

(4.10) ord(«(Fr,), .F[g]/(Fr^ - l).F[g]) = d . 

By (4.9), we write Fr^ = a'yTa~^g G Gq for some a G Gq and g G Gl'- Then, for every 
^ G H^{Q, E[q]) which is unramified at i and satisfies ^{g) = 0, we have 

^(Fr7 = ^{a'yTa~^g) = ^{aQT(T~^) = + ^(a) 

= + ^{a) = ar^(a"7 + 

= -aTa~^^{a) + ^{a) + = -(Fr^ - l)^(a) + a^(7r) 

= in .F[g]/(Fr^ - l)^[g], 

where the equality (i) follows from ^(g) = 0, and (ii) follows from q e Gl- Since 

(Fr<. - l).F[g] = a{T - l)E[q], 

we have 

(4.11) ord (e(Fr,), E[g]/(Fr, - l)i7[g]) = ord (e(7r), E[q]/{T - l)E[q]) . 

By (4.8) and (4.11) with ^ = k, we conclude (4.10). 

(3) . By definition, we have loc£(? 7 ) G H^(¥e,E[q]). By (4.8) and (4.11) with ^ = p, we 

deduce that ^(Fr^) is of order g in E[q]/ (Fr^ — l)i7[g], and hence the image of p in E{Qi)/q is 
of order g. Since E{Q^)/q = Z/gZ, we prove the assertion (3). □ 
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Lemma 4.11. Under the notation and assumption as in Lemma 4.10, we further assume that 
DDf^Zs mod q G H\Q{Si),T)/q). Then, 

Dzs = 0 modqH\Q{S),T). 

Proof. We denote by the inverse image of DDf'^zse mod q under the isomorphism 
H\Q, E[q]) = {Tse, H\Q{Si), E[q])). Theorem 3.19 (4) implies that 

OTd{\oce{K‘'^^),H^{Qe,E)[q]) = ord(loc£(K), .E[g])). 

By the eondition (2) of Lemma 4.10, we have 

(4.12) ord(loc,(«W),i7'(Q,,E)[g]) = ord {Dzg, H\Q{S),T)/q) . 

Henee, we are reduced to showing that the image of in E) [q] is trivial. For a prime 

w, we denote by the perfect pairing induced by the cup product 

E{Q^)/q X H^{Q^,E)[q] Z/qZ. 

Since the natural map E[q]) E{Qf)/q is surjective (Lemma 4.10 (3)), by taking 

the Pontryagin dual we have an injective homomorphism 

(4.13) iF^(Q<.,E)[g]Horn (iJj^p 5 ,(Q,.E[g]),Z/gZ) ; a H-(y H-(?/, a)^). 

Hence, it suffices to show that the image of is in the kernel of the map above. Since p 7 ^ 2, 
the Hasse principle shows that for x G 

{4.14) ^ 

io|^:prime 

IftefpS'T, then Corollary 3.16 implies that loc^^,(/^^^^) G i?(Q^)/g, and hence = 0. If 

w\pS', then by the definition of E[q]), we have {x, = 0 . Therefore, by (4.14), 

we obtain {x, = 0. Since x G E[q]) is arbitrary, we deduce that the image of 

in (Q^, E) [q] is in the kernel of the injection (4.13) and hence it is trivial. □ 

Lemma 4.12. Let w be an integer and q a power of p. We assume that Theorem 4.9 holds 
for any Darmon-Kolyvagin derivative whose weight is strictly less than w. Let D be a Darmon- 
Kolyvagin derivative with support S such that max£| 5 {e£(i 9 )} < p and w{D) = w. We suppose 
that S G and for every prime ^\S, E{¥f)[p] is cyclic. Iford^D) < Vg (ifjp(Q, E[q])'j, then 

Dzs mod q G {Ts, H\Q{S) , T)/q) . 

Proof. We write S' = It suffices to show that 

(4.15) Dzs mod q G H\Q{S),T)/q) 

for each 1 < f < s. It suffices to consider the case i = 1. If (D) = 0, then we have 
D = N(^D' for some derivative D', and hence we deduce (4.15). We assume that ee^iD) > 1. 
Then, by Lemma 3.1, we have 

{ae^ - l)D =-ai^D' mod gZ[r 5 ], 
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where D' is a derivative such that ord(Zi)') = ord(Zi)) — 1 and Supp(Zi)') = S. Hence, we have 

w{D’) = w{D) - 1, 

which implies that Theorem 4.9 holds for D', that is, D'zs = 0 mod qH^{Q{S),T). Hence, we 
obtain 

((j£i - l)Dzs = -ae^D'zs = 0 mod q, 

which shows (4.15). □ 

Proof of Theorem 4.9. We prove the theorem by induction on w{D). Note that the 
theorem obviously follows from Proposition 4.8 when w{D) < 0. Thus, we may assume that 
w := w{D) > 0 and that the theorem holds for any derivative whose weight is strictly less 
than w. Then, by Lemma 4.12, we have Dzs mod q E (Ts', H^{Q{S),T)/q). We denote 
by K the inverse image of Dzs mod q G {Ts, E[q])) under the isomorphism 

H\Q, E[q]) = (Ts, H\Q{S), E[q])). 

We claim that 

r,(i/;,,s.(Q,B[9l)) >0. 

We assume that = 0- Lemma 4.3 and the exact sequence 

0 ^ Hj^pS'iQ^ ^[q]) ^ ®e\s'E{Qi)/q, 

we have 

^ W,pS'{Q^ E[q])) +rp{®i\s'E{Qe)/p), 

and hence by the assumption, 

ord(L>) < '^rp{E{Qi)/p). 
e\s' 

For a prime i f pN, we have 

E{Qe)/p = E{Qe)\p]= E{¥e)[p], 

where the first (non-canonical) isomorphism is due to the structure theorem for finite abelian 
groups and to that E{Qi) = © i?(Q£)tors- For a prime i\S, E{¥£) [p] is assumed to be cyclic, 

and then we have rp{E{Qe)/p) < 1. Hence, 

ord(i9) < ^ 1. 
e\s' 

However, by the definition of S' = Cond(i9), we have 1 < ord(i9). Then, we have a 
contradiction and hence [Hjpg,{Q, E[q])) > 0. 

By the claim above, there exists a prime i satisfying the conditions (1), (2) and (3) in Lemma 
4.10 for Dzs- Since ord(i9i9^^^) < Vq (iF|p(Q, E[q])'j , by Lemma 4.12 we have 

DD^^hse mod q e {Tse, H\Q{Si),T)/q) . 

Hence, Lemma 4.11 implies that Dzs = 0 mod q. □ 
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Remark 4.13. If the image of in E[q]) always belonged to E{Qp)/q as in [6, 

Theorem 4.9], our proof would work under the assumption that ord(Zi)) < rq(Sel(Q, E[q])). 

We put Vin = min {rp« E[p^]))] . 

Corollary 4.14. Let S be an element of ^ such that for each prime l\S, E{¥fj[p\ is 
cyclic. Then, we have 

o-eTs 

Proof. We may assume that t mir, > 1. To apply Lemma 3.6 for if^(Q(S'), T) and zs, we 
take a derivative D sueh that Supp(i9) = S and ord(i9) < minjr rniTi , v}. We denote by S' the 

eonduetor of D, and then D = D'N s , where the derivative D' satisfies 

w 

Supp(D') = Cond(D') = S', n{D') = n{D), ord(D') = ord(D). 

Therefore, 

Dzs=i n ^(Fr,-') D'zs', 

V|(5/S') / 

where i ranges over all the primes dividing S/S'. By definition, if we put q = n{D'), whieh is 
a power of p, then S' e Sinee 

ord(L>') = ord(L>) < r^m < rq E[q])) , max{ee{D')} < ord(L>') < p, 

Theorem 4.9 implies that D'zs' = 0 mod g, and henee Dzs = 0 mod q. Consequently, Lemma 
3.6 shows that 

(4.16) ^ zY Nszs ® 1 e H\Q{S),T) 0 

o-GTs 

Sinee the Galois representation Gq ^ Autzp(T) is assumed to be surjeetive, i?(Q)[p°°] = 0, 
and then the natural map if^(Q, i?[p"^]) —)■ E[^{Q, E\p°°]) is injeetive for all n > 1. Henee, 
the induetive limit Hjp{Q, E[p°°]) := lin^ iff „(Q, i?[p”]) is not finite, sinee tmin > 1- By [25, 

n 

Theorem 2.2.3] (our ifjp(Q, E[p°°]) eoineides with iSsp(Q, E\p°°]) in [25]), we have zi = 0, 
and then NsZs = = 0- From this and (4.16), we eomplete the proof. □ 

4.1.3. A modification of the theorem. 

Theorem 4.15. Let q be a power of p. Let D be a Darmon-Kolyvagin derivative with 
support S such that uiaxi^\s{efiD)} < p. We suppose that S G SVq and for each prime i 
dividing S, E(¥£)[q] is isomorphic to Z/gZ or 0. We put S' = Cond(Zi)) and recall that 
Aq{S') := ®i\s'E{<^f)/q. //ord(L>) < (if)p_ 5 ,(Q, .C[g])) +rp(Aq(S")), then we have 

Dzs = Q mod qH\Q{S),T). 
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Remark 4.16. By Lemma 4.3, we have 

£[«])) < r, BfeD) + rp(^,(S')). 

In particular, when q = p, Theorem 4.15 implies Theorem 4.9. 

Lemma 4.17. Let w be an integer and q a power ofp. Wfe assume that Theorem 4.15 holds 
for any derivative whose weight is strictly less than w. Let 79, S and S' be as in Theorem 4.15. 
We suppose thatw{D) = w. 7/'ord(Z9) < r-g E[q])'j + rp{Ag{S')), then 

Dzs mod q G [Vs, H\q{S),T)/q) . 

Prooe. We simply write ^ E[q]). Let S' = £1 • • • 4 be the prime factorization. 

We write D = ■ ■ ■ Df , and then for each 1 < i < s , one of the following assertions 

holds: 

(a) ki = 0. 

(b) ki > 2. 

(c) ki = l,ii e Sgq\ ^E,q, and hence E{Qe^)/q = 0. 

(d) ki = 1, ii e and hence 79(Q^)/^ = Z/gZ. 

It suffices to show that for each 1 < 7 < s, 

(4.17) Dzs e 77° (r,^,77i(Q(5),T)/g) . 

Step 1. For each i satisfying (a), (b) or (c) above, the assertion (4.17) holds. 

We only need to consider the case 7 = 1. If /ci = 0, then we have 79 G NifL\rs\, and hence 
Dzs G 77° (Tf^, 77^(Q(S'), T)/g). Hence, we may assume that ki > 1. Then by Lemma 3.1, 

(4.18) (^4 - 1)79 = ■ ■ ■ Df;'> mod qZ[Ts\. 

We put 79' = 79j^'"^^79g"^ ■ ■ ■ Df;\ Then, 

Supp(79') = S', ord(79') = ord(79) — 1, 

and hence 

w{D') = w{D) - 1. 

Since generates T^^, by (4.18), it suffices to show that 

D'zs = 0 mod q. 

We consider the cases (b) and (c). 

Case (b). In this case, we have Cond(79') = S'. We recall that 

ord(79') < ord(79) < rg{Hjps,)+rp{Ag{S')). 

Then, Theorem 4.15 holds for 79', that is, D'zs = 0 mod q. 

Case (c). In this case, we have Cond(79') = S"/7i. Since E{Qi-^)/q = 0, we have 


rp{Ag{S'/ii)) = rp{Ag{S')). 
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Then, we have 

ord(T>') < + rp{Ag{S’/ii)). 

Henee, Theorem 4.15 holds for D', that is, D'zs = 0 mod q. 

Step 2. We prove the lemma by induetion on the number n of primes satisfying (d). Without loss 
of generality, we may write S = • • • 4, where fi, £ 2 , • • •, satisfy (d) and ... jig 

satisfy (a), (b) or (c). 

The case n = 0. This ease follows from Step 1. 

The case n > 1. By Step 1, we are reduced to showing that for 1 < i < n 

Dzs mod q G {Ve^, H\Q{S),T)/q) . 

It suffices to consider the case i = 1. Let Si = S/ii and ■ ■ ■ Dfj’\ Then, we have 

(4.19) {ae^-l)Dzs = -N^^Ds^zs = -P^^iTiJ^)DsiZs^ mod g. 

By Lemma 4.5, 

ord(L) 5 j = ord(L)) - 1 < rq{H]ps,) + rp{A{S')) - 1 

<r,{Hlps,/,,)+r,{AiS'/h)). 

We recall that Cond{Dsj^) = S'/ii. Since ii E ^E,q, we have w{Dsi) = w{D) = w. There¬ 
fore, we may apply the induction hypothesis on n to Ds ^, and then obtain 

Ds,zs, mod qE [Ts,, H\Q{Si),T)/q) . 

Hence, we have 

= Pei{^)Ds^zs^ = 0 mod q, 

and then by (4.19), we complete Step 2. □ 

Proof of Theorem 4.15. As in the proof of Theorem 4.9, Theorem 4.15 is proved by 
induction on w{D). By Lemma 4.17, Dzs mod q E P[^ (T^, P[^{Q{S),T)/q). Let k be the in¬ 
verse image of Dzs mod q under the isomorphism H^{Q, E[q]) = (T^, H^{Q{S), E[q])). 

Since ord(Zi)) < Vq (^Hjpg,{Q, E[q])'^ + rp{Aq{S')), by the same argument as that in the proof 
of Theorem 4.9, we have rq{Hjpg,{Q, E[q])) > 0. Hence, by Lemma 4.10 there exists a prime 
i the conditions (1), (2) and (3) in Lemma 4.10 for Dzs. LFsing (4.3), we have 

ord(DCj‘>) < r, -EM)) + 

Since Cond(i9i9^^^) = S'i, by Lemma 4.17 we have 

DDf hse mod q E {Tse,H\Q{S^),T)/q) . 


Then, Lemma 4.11 implies that Dzs = 0 mod q. 


□ 
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4.2. Local behavior of derivatives of Euler systems at p. In this subsection, we relate the 
localization of certain derivatives of Euler systems at p with arithmetic invariants such as the 
Tate-Shafarevich group (Corollary 4.19). 

We put r'E = rank(i?(Q)) and denote by III the Tate-Shafarevich group of E over Q. For a 
positive integer S and A = Tp{E), Vp{E) or E\p], we put 

H\Q{S)<»Qp,A) = (BmpH\Q{S)^,A), 


where A ranges over all the primes of Q(S') dividing p, and Q(S')a denotes the completion at A. 
We denote by Hj{Q{S) 0 Qp, A) the image of the Kummer map, and define 

//(Q( )®Qp, ) 

For p G H^{Q{S), E[p]), we denote by \oCp{p) the image of p in H^{Q{S) 0 Qp, E[p]). 


Theorem 4.18. We assume that E{Qp)/p = Z/pZ. Let D be a Darmon-Kolyvagin deriva¬ 
tive with support S such that max£|5{ef(i9)} < p. Suppose that S G ^p, and for each prime 
l\S, E{¥()\p\ is cyclic. We put S' = Cond(i9). IfoTd{D) < Vp (^Hj g,{Q, E[p])^ +rp(Ap(S")), 
then the following assertions hold. 

( 1 ) Dzs modp e H\Ts,H\q{S),T)/p). 

(2) If we denote by n & E\p]) the inverse image of Dzs mod p under the isomor¬ 
phism Fr^(Q, E\p]) = (r^, H^{Q{S), E[p])), then we have 

\oCp{n) G Hj{Qp,E\p]). 

Proof. We write = E[j^^{Q, E[p]). Since E{Qp)/p = Z/pZ, by the exact sequence 
(4.20) 0 —)■ Hjpg, —)■ Hjg, —)■ E{Qp)/p, 

we have Vp (^Hj A < 'V {HjpS') + and then the assertion (1) follows from Femma 4.17. 

We prove the assertion (2). If Vp (Hj g,) = Vp then Theorem 4.15 implies that 

Dzs = 0 mod pH^{Q{S),T), and hence k = 0. We assume that Vp {Hjg,) = Vp {Hj^g,^ + 1. 
Then, by (4.20), the map Hj g, -A E{Qp)/p is surjective. Since the pairing 

(-, -)p : E{Qp)/p X Hjf{Qp, E[p]) Z/pZ 

is perfect, it suffices to show that 

(c, k)p = 0 for c G E{Qp)/p. 

We take an element c G E{Qp) jp. Since E^g, -A E{Qp) /p is surjective, there exists an element 
p G Hj g, whose localization at p coincides with c. Then, by the Hasse principle, 

{c,k)p = {p,k)p = - {p,k)^. 

w]p:pnme 

By the definition of Hj^gfQ, E[p\) and Corollary 3.16 for k, we have (p, k)^ = 0 for ta f p, 
and hence (c, k)p = 0. □ 
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The following plays an important role in the proof of Theorem 6.4. 

Corollary 4.19. Wfe assume that E{Qp)/p = Z/pZ and p > te- Let D be a Darmon- 
Kolyvagin derivative with support S. We suppose that S G cAp and E{¥i)[p\ is cyclic for each 
prime l\S. Ifoid{D) = te and \oCp{Dzs mod p) ^ 0 Qp, E[p\), then we have 

(1) m[p] = 0, 

(2) the natural map E{f^)/p ®i\sE{Q.£)/v is surjective. 

Proof. We put 5" = Cond(i9). Sinee loCp(Zi) 2 :s') ^ Hj{Q{S) ® Qp, E\p]), Theorem 4.IS 
implies that 

Te > rp{Hjs,)+rp{A{S')). 

On the other hand, by Lemma 4.3, 

VpiHls') + rp{A{S')) > rp(Sel(Q,E[p])), 

and then we have 

(4.21) Te = rpi^f,S') + = rp(Sel(Q, E\p])). 

This implies that III[p] = 0, and the sequenee 

0 —)■ Hjg, —)■ E{Q)/p ®i\s'E{Q£)/p —)■ 0 

is exaet. Then, it remains to show that for each prime i dividing S/S', E{Qi)/p = 0. We 
assume that E{<Q^f)/p = Z/pZ for some ^ dividing S/S'. Since ^ \ S', we have D = N^D', 
where D' is a derivative such that Supp(i9') = S/^ and ord(i9') = te- We claim that 

(4.22) \oCp{D'zs/£ mod p) G H\Ts/£, H}f{Q{S/i) 0 Qp, E\p])). 

In order to prove this, we take a prime i' dividing S/i. If eefD') = 0, then D' G NiiZfT s/t\-, 
and hence we have \oCp{D'zs/t mod p) G if°(r£/, iJ|j(Q(S'/£) 0 Qp, E[p])). We assume that 
a{L)') > 1. Then, we have (a^/ — l)i9' = —apD" mod p, where D" satisfies ord(i9") = r^—1. 
If we put S" = Cond(i9"), then by Lemma 4.3, we have 

Te - I < rp(Sel(Q, E\p])) < rp{Hjg„) + rp{Ap{S")). 

Hence, Theorem 4.18 implies that \oCp(D"zs/e mod p) G Hj{Q{S/i) 0 Qp, E\p]), and then 

loCpiD'zs/e modp) G H\re,H}f{Q{S/i) ®Qp,E[p])). 

Therefore, we deduce (4.22). 

By (4.22), in Hjj:{Q{S) 0 Qp, ^[p])), we have 

\oCp{Dzs) = \oCp{NeD'zs) = Pe(FTf^)\oCp{D'zg/e) = PeilfoCp{D'zg/e) = 0 . 


Then, we have a contradiction. 


□ 
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4.3. Rational points from derivatives of Euler systems. In this subsection, we show that if 
a certain derivative of an Euler system is not divisible by p, then it comes from a Q-rational 
point of E. We assume that E{Qp)/p = Z/pZ and the natural map E{Q)/p —)■ E{Qp)/p is 
surjective. In particular, the localization map Sel(Q, E[p\) —)■ E{Qp)/p is surjective, and hence 

r, (HjJQ, E\p]))= r, (Sel(Q, B|p|)) - 1. 

We put Cp = ker {E{Q)/p —)■ E{Qp)/p). Then, we have 

(4.23) rp{Cp) = r-E-I- 

By applying the snake lemma to the commutative diagram 

0 -^ E{Q)/p -^ Se\{Q, E[p]) -^ m[p] -^ 0 

0 -)■ E{Qp)/p -)■ E{Qp)/p -)■ 0 -)■ 0, 

we have an exact sequence 

(4.24) O^Cp^ HlpiQ, E[p]) ^ Ul[p] ^ 0. 

Theorem 4.20. We assume that E{Qp)/p = Z/pZ and the map E{Q)/p —)■ E{Qp)/p is 
surjective. Let D be a Darmon-Kolyvagin derivative with support S and max£|s'{e^(ii))} < p. 
We suppose that S G jLp, and for each prime j\S, E{¥()[p\ is cyclic. Ifoid{D) = — 1 and 

Dzs ^ 0 mod pH^{Q{S),T), then the following assertions hold. 

(1) m[p] = 0. 

(2) The localization map ifjp(Q, E[p\) ®e\sE{jQ,i)/p is surjective. 

(3) Dzs modpeH^(Ts,H\Q{S),T)/p). 

{A) If K G H^{Q, E\p]) denotes the inverse image of Dzs mod p under the isomorphism 
E\p\) = {Ts, E[p])), then w have 

K G E{Q)/p. 

Proof. (1). Since Dzs ^ 0 mod p. Theorem 4.9 implies that — 1 > rp{Hjp). Hence, by 
(4.23) and (4.24), we have rp{Hjp) = te — I and III[p] = 0. 

(2). Since ord(Zi)) = rp{Hjp) and Dzs ^ 0 mod p. Theorem 4.15 implies that 

rpiHlp)>rpiHlpS,)+rpiApiS')). 

Hence, the sequence 

(4.25) 0 —)■ Hjpg/ Hjp ^ ®e\s'E{Qe)/p —)■ 0 

is exact. In order to deduce the assertion (2), it suffices to show that for each prime i dividing 
S/S', we have E{Q()/p = 0. We assume that E{Q()/p = Z/pZ for some prime j dividing 
S/S'. Since j \ S', we have D = NiD', where D' is a derivative such that 

Supp(Zi)') = S'/f, Cond(Zi)') = Cond(i9), ord(Zi)') = ord(Zi)) = — 1- 
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Lemma 4.12 implies that G iL^(Q(S'/£), T)/p) , and hence, we have 

Dzs = NuD'zs = Pe{Yi^^)D'zs/i = Pt{l)D'zs/ii = 0 mod p. 

Hence, we obtain a contradiction. 

(3) . The assertion (3) follows from Lemma 4.12. 

(4) . We first show that k G Sel(Q, i?[p]). By Corollary 3.16, we are reduced to showing 
that for each prime ^\pS', we have loc£(fi;) G E{Q()/p. By taking the Pontryagin dual of the 
sequence (4.25), the map 

^ ^ Hj^p{Q,E\p\y] {gi)e^ 177 i-A p)t 

e\S' \ £|s' 

is injective. We claim that the image of k in ©£| 5 'Lr^(Q£, E) [p] belongs to the kernel of the map 
above. Indeed, if we take an element p G Hj p{Q, E[p]), then by the Hasse principle, 

V)e = - V)v = -(© v)p = 0 , 

l\S' v\S' 

where the second equality follows from Corollary 3.16, and the last equality follows from the 
definition of iLjp(Q, E[p]). Since the map ip is injective, \oce{K) G E{Q£) jp for all i\S'. In ad¬ 
dition, by Theorem 4.18, we have 1 oCp(k) g E{Qp)/p. Then, we deduce that k G Sel(Q, E[p]). 
Hence by the assertion (I), we have n G E{Q)/p. □ 

Remark 4.21. (I) For Heegner points, a similar result was obtained in [6, Proposition 

5.10], where iL-rational points are considered for imaginary quadratic fields K. 

(2) Zhang [32] recently proved a conjecture of Kolyvagin, which asserts indivisibility of 
Kolyvagin derivatives of Heegner points. 

5. Local study of Mazur-Tate elements 

The aim of this section is to show that if we extend coefficients to Zp, then the order of 
vanishing of Mazur-Tate elements is greater than or equal to the corank of the Selmer group 
(see Theorem 5.17 for the precise statement). We fix a global minimal Weierstrass model of E 
over Z, and denote by u the Neron differential. Then, let be the period as in Section 2. 

5.1. Preliminaries on group rings. 

5.1.1. Local property. Let p be a prime. For a finite abelian group G, we denote by Iq the 
augmentation ideal of Zp[G]. 

Lemma 5.1. For an element a G G whose order is relatively prime to p, we have a — 1 E Iq 
for all t >1. In particular, ifp \ |G|, then Iq = Iq = 1% ~ ■ 


Proof. This is [6, Lemma 3.4]. 


□ 
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Lemma 5.2. Suppose that we are given a decomposition G = K x H with p\ \ H\. Let a be 
an element o/Zp[G]. Let uk denote the image of a under the map Zp[G] —)■ induced by 

the projection G ^ K. If ax G for some t>l, then a G Iq. 

Proof. By the natural inclusion Zp[K] ^ Zp[G], we regard ax as an element of Zp[G]. 
Then, we have 

a - ax ^ ker(Zp[G] -)■ Zp[ii']) = Zp[K] In- 
Lemma 5.1 implies that 'Lp[K] ® In = '^p[K] ® In- Since ax G Ix, we have a e If. □ 

Lemma 5.3. Under the notation as in Lemma 5.2, we suppose that a G If. VPe denote by 
a^P^ {resp. a^x) the image of a {resp. ax) in Z/pZ 0 If/lff^ {resp. Z/pZ 0 If/lff^). If 
= 0 ’ = 0 . 

Proof. As in the poof of Lemma 5.2, we have 

a-axe ZplK] ® if = Zp[A:] 0 1^+^ C Zp 0 

Then, we have — aff = 0 in Z/pZ 0 If/lf'^, where we regard a^^ as an element of 
Z/pZ 0 If/iff ^ under the map induced by the inclusion K C G. Since a^^ = 0, we have 

a^P^ = 0 . □ 

5.1.2. Global property. Let i? be a proper subring of Q and Iq the augmentation ideal of R[G]. 

Lemma 5.4. Let a be an element of R[G]. For a positive integer t, the following conditions 
are equivalent 

(1) a e If. 

(2) a G Zp ®x If for all the primes p not invertible in R. 

Proof. This is [6, Lemma 3.2]. □ 

5.2. Construction of a system of local points. With a modification of ideas of [13], [14] and 
[23], we construct local points of E to connect Kato’s Euler system with Mazur-Tate elements. 

In the rest of Section 5, we fix a prime p such that 

(1) p\QN ■ |.E(Fp)| 

(2) the Galois representation Gq —)■ A.vXi^{Tp{E)) is surjective. 

For an integer S, let Q{S) and T^ be as in Section 3. Let denote the ring of integers of Q(S'). 
If we put Hs = Gal(Q(p. 5 )/Q(S')), then we have the canonical decomposition Gs = Hs x T^. 
For a finite unramified extension K of Qp and its ring of integers, let a denote the arithmetic 
Frobenius. We denote by E the formal group law of E over Zp (associated to u) and by logp 
the logarithm of E, which induces an isomorphism E{ff) —)■ pff. 

Femma 5.5. We suppose that K is a finite unramified p-extension ofQp. Then, we have an 
isomorphism defined as 

Eiff) Cl-)- (l — —<J + logp(c). 

V p p / 



30 


K. OTA 


Proof. Since log^ : E{ff) — )■ is an isomorphism, it suffices to show that the map 

j ^ is an isomorphism. We put d = [K : Qp]. 

We first assume that p is a good ordinary prime of E, that is, p f Op. Let a G Zp be the unit 
root of — ttpX + p and fd G pZp the other root. Then we have 


(5.1) 




p 


-a H —a 

p 



Since p f |i?(Fp)|, we have Op ^ 1 mod p, and hence a ^ 1 mod p. We note that — 1 G Zp , 
since d is a power of p. For A G if we put 


xa 




then 



Since jd G pZp, we see that ha ■= — z2k>i P ^a ^ converges, and it satisfies 



By (5.1), we have 

fl- —a + Pa = A. 

V p p / 

Hence, the map ^1 — y a + p<^^ j ^ is surjective, and then it is an isomorphism. 

We next assume that p is a good supersingular prime of E. Since p > 5, we have Op = 0. For 
y4 G if we put = - X^^>^(-p)^A^“^\ then 


(l + Va = A. 

Hence, the map j • P^ -A- 6 is surjective, and then it is an isomorphism. □ 

For an integer S', we have Gs Zp = HaIp where A ranges over all the primes of Q(S') 
dividing p, and Ggp denotes the completion of at A. Then, the logarithm logp naturally 
induces an isomorphism E{Gs ® ^p) P^s ® ^p> where E{Gs ® ^p) = ®a|p-E(^s,a)- 


Definition 5.6. For a square-free integer S relatively prime to p, we define an element 

cs^E {Gs ® Zp) by 

(5.2) 1^1 - logp(c5) = (Cs) ^Gs® Zp. 

By Lemma 5.5, the element cs is well-defined. 
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Proposition 5.7. Let ^be a prime not dividing pS. Then, we have 

^^st/s{cst) = -cp , 

where Tis(./s '■ E{iTse ® Zp) —)■ E{ffs ® ^p) is the trace map with respect to the addition of E. 
Proof. By Lemma 5.5, it suffices to show that 

fl’Q(S£)/Q(S) O (CS£) = -tl’Q(Ms)/Q(S) (cf' ) • 

Since trQ( 5 £)/Q(s) o tTQ(pgt)/Q(se) = tFQ(Ms)/Q(s) ° ^T^Qirse)mMs)^ we are reduced to showing that 

Fr~^ 

^T^Q{rsi)mrs)iCs£) = -(s ^ > which is not difficult to show. □ 

Proposition 5.8. Let xb^ ^ character ofTs- Then, we have 

(l - ^x{p)~^ + logs(4)xW = Ts(x). 

\ P P / 

On the right hand side, we regard x as a character ofGs = x E[s by x\hs = 1- 


Proof. By (5.2), we have 

f ^ logs(cs)) x(<5) = (trQ(Ms)/Q(S)(Cs)) x(<5) 

5€rs V V P P / / 5grs 

(5-3) = CsX(7) = ^s(x)- 

7eGs 

On the other hand, we have 


logp(cs)) x(<5) 

(SeTs V V P P / / 

= Y1 logp(4)x(<5) ^ logp(cf 

5 ^5 ^5 

= 5^1ogp(4)x(<5) - — + -5^1ogB(4)x(c^“^<^) 

5 ^5 ^5 

= ^log^(4)xW - ^x(p)'^5^1ogs(4)xW + ^x(p)"^Xl^°Ss(4)x(^) 

(5-4) ^ + “^(P)~^) Y logE(4)x(<5), 


where the equality (a) follows from x((t) = xip)- Combining (5.3) and (5.4), we complete the 
proof. □ 
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5.3. Kato’s Euler system. We put T = Tp{E) and V = T ® Qp. For an integer S, we have 
the pairing ) induced by the cup product 

(—, —) : ifj(Q(S') (8) Qp, V) X 0 Qp, V) ©a|sQp Qp; 

where the last map is given by (aA)A XIa Then, we have a Qp-linear map 

(5.5) H\Q{S) 0 Qp, I") ^ HomQ^ (i^/(Q(^) © Qp, Qp) • 

The exponential map exp^ of E induces an isomorphism Q(S') 0 q Qp Qp,V). 

By taking the dual, we have a Qp-linear map 

(5.6) HomQj, (iFj:(Q(S') 0Qp, l^),Qp) -)■ HomQp(Q(S') 0Qp,Qp) = Q(S') 0 Qp, 

where the last isomorphism comes from the perfect pairing (Q(S') 0 Qp) x (Q(S') 0 Qp) —)■ Qp 
given by {x, y) hA trQ( 5 )/Q(a;|/). The dual exponential map expj (associated to uj) is defined as 
the composite of (5.5) and (5.6) 

H\Q{S) 0 Qp, 1/) -A HomQ^ ® Qp) ^ Q(>^) ® Qp- 

We note that for c e E{0’s © ^p) and x G TrQQ(S') 0 Qp, T), 

(5.7) (c, z) = trQ( 5 )/Q (log^(c) • exp 5 (x)) G Zp. 

Let J/' be the set of square-free products of primes relatively prime to piV. By applying [25, 
Lemma 9.6.1] to Kato’s Euler system (cf. [11, Theorems 9.7 and 12.5]), we have the following. 


Theorem 5.9 (Kato). There exists a system {3m}m>o £ Y\.m^^ 
following conditions. 

(1) For m > 0 and a prime i, we have 


m),T) satisfying the 


C'Or,^^/m (3 mi ) 


T£(Fr^ )3„ ifffpm 
3m if ^\pm. 


In particular {2iSp^}seyr,n>o Is an Euler system in the sense of Definition 3.11. 
(2) For every character x ofVm of conductor m, we have 


^( 7 ) exp;;(3;^^) 




HE,x,l) 

n+ 


For a square-free integer S relatively prime to p, we put 

©5=5^ 3^' © 7 e H\Q{S),T) 0 Zp[r5]. 

TGTs 
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Notation. In the rest of Section 5, for a finite abelian group G, we denote by Ig the augmen¬ 
tation ideal of Zp[G]. For an integer S, we denote by sp(S') the number of split multiplicative 
primes dividing S, and we also denote by b 2 {S) the number of good primes i dividing S such 
that tti = 2 (i.e. ^^(1) = 0). 


Proposition 5.10. Fora square-free integer S relatively prime to p, we have 

Qs e H\Q{S),T) 0 


Proof. Our proof is similar to that of [7, Theorem 4.2]. We denote by Si the product 
of primes i dividing S such that i is either a split multiplicative prime or a good prime with 
tti = 2. We prove the proposition by induction on the number a of primes dividing Si. The case 
where a = 0 is trivial. We assume that a > 1 and write Si = ii - ■ ■ ia, S' = S/Si. By using 
Ts = X ■ • • X X r^/, for 7 G Ts we write 7 = 7 £i ■ • • 7£„7', where each 7 ^. is an element 
of r^., and 7 ' G r^/. Let /i(-) denote the Mobius function. Then, 


E ® (77 - 1 ) • • 

•(77 

- 1)7'= 

©5 + 

E E ^(*^1/^)7 

TGTs 






7Grs d\Si.d^Si 

0 S + 

E 

F{Sild) 

E 

7 o ^Cors'/rfs'/js 

® 7 o 







0 S + 

E 

F{Si/d) 

E 


^)ldS’ ® 7 o 



ToGT^S/ 

^1^ 






/ 

\ 



0 S + 

E 

F{Sild) 

n 







VI ^ 

) 




Hence, we have 



77 


(5.8) ©s = 35 ' ® (71 - 1 ) • • • ( 7 a 


1)7' 


d\Si,dj^Si 


V'It / 


Qds'- 


By assumption, for each prime i dividing Si/d, we have Pefr) = 0, and then Pf(Fr^ G Is- 
Hence, by the induction hypothesis and (5.8), we complete the proof. □ 


5.4. Kato’s Euler system and Mazur-Tate elements. 

Definition 5.11. For a square-free integer S relatively prime to p, we define ^{^s) by 

i)(3s)= 5Z(cs,jy‘)7 6Zplrs]. 

7Grs 

By abuse of notation, we denote by yr^/n the natural map TjplTm] —)■ Zp[T„] for n\m. 
Proposition 5.12. Fora square-free integer S relatively prime to p, we have the following. 
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(1) Let I be a prime not dividing pS. Then we have 

T^se/s{i^{dse)) = -'FTePe(FTj^)b{^s)- 

(2) For every character xofVs of conductor S, we have 

L{E,x-\l) 


xi^ids)) = Tsix)'- 


n+ 


Proof. By (5.7), we have 

^( 35 ) = 5^(c5,35 ')7 = Y 1 (log^(C5) expJ( 3 J 

'yeTs -yers 

= ^Y1 logs(4) exp5 

7ers (SeTs 


7 


( 3 ? ')7 = logB(4)exp5(35 ')57 

7ers <5Gr5 


(5.9) 


log^(4)<^ X exp5(3s ')7 I in (Q(^) 0 Qp)[rs]. 




^76rs 


By using Proposition 5.7, we have 


T^se/s ( ^2 logs (cse)^ I - X] (trQ(50/Q(s) (logs () 

\5ers^ / i5ers 


Pr7^<5 
Cc 


S 


— ^2 logs \ '^s 

SeTs 

= -J2 log^ (4) 

5ers 

By Theorem 5.9, we have 


(5.10) 


(5.11) 


T^se/s ( Y1 oxp5f(4/)7) = 5^expj(3j ')7P£(Fr/). 


'^7srs£ 


TGTs 


By (5.9) (replacing S by Si), (5.10) and (5.11), we deduce the assertion (1). By (5.9), Proposi¬ 
tion 5.8 and Theorem 5.9, we conclude (2). □ 

We denote by 9s,p G Zp [T 5 ] the image of the Mazur-Tate element 9s under the natural pro¬ 
jection Zp[G 5 ] Zp[rs]. 

Corollary 5.13. For a square-free positive integer S relatively prime to p, we have 

^{i)s) = (^s,p G Zp[r 5 ], 

Proof. Combining the proposition above with Proposition 2.3, we have 

x{0s,p) = X(^( 3 s)) for all the characters x of T^, 

which shows that the element 9s,p—'9{^s) G Qp [r^] belongs to all the maximal ideals of Qp [T s] ■ 
Hence, we have 9s^p = '*?( 3 s)- □ 

As in Section 4, we put tmin = niin„>i{rpn (i7|p(Q, E\p ^])'^}. 
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Corollary 5.14. Let S be a square-free product of primes I relatively prime to N such 
that EiWg) [p] is cyclic, that is, EiWi) [p] is isomorphic to Z/pZ or 0. Then, we have 

r. ^min{rmin, p] 

hs e 

Proof. We first assume that {S,p) = 1. By Lemma 5.2, we are reduced to proving that 
^s,p £ which follows from Corollaries 4.14 and 5.13. 

Next, we assume that {S,p) 1. If we put S' = Sjp, then p f S'. By the case above and 

Proposition 2.3, we have 

Tis/sies) = -FVp(i - opR-' + r;")»s. € 

Since p\ \Gp\, Lemma 5.2 implies that 6s G Pf □ 

We define Sel(Q, i?[p°°]) = li^Sel(Q, and put r^oo = corankzp(Sel(Q, i?[p°°])). 

n 

Since Sel(Q, Elp"]) Sel(Q, i?[p°°])[p”] is surjective (cf. [25, Lemma 1.5.4]), we have 

(5.12) rpn(Sel(Q,.C[p^)) > (Sel(Q, E[p°°])[p"]) > 

for n > 1. Since p \ |i?(Fp)|, by the exact sequence 0 —)■ E{Zp) —)■ E{Qp) —)■ E{¥p) —)■ 0, we 
have E{Qp)/p = Z/pZ. By Lemma 4.3, we have 

(5.13) V(ifip(Q,E[p^)) > v(Sel(Q,E[p"])) - 1 forn > 1. 

Combining (5.12) and (5.13), we have tmin > Pp°° — 1, and hence by Corollary 5.14 we have 
the following corollary. 

Corollary 5.15. Let S be a square-free product of primes i relatively prime to N such 
that E{¥fj[p\ is cyclic. Then, when r^oo > 1, we have 

„ j.min{r oo-l,p} 

6s e 

5.5. Application of the p-parity conjecture. First, following [19, Chapter 1, §6], we recall 
the functional equation of Mazur-Tate elements. Let wm be the operator on S' 2 (ro(iV)) defined 
as p !-)■ j^g Let / be the newform corresponding to E. Then there exists Sf G {±1} 
such that tU 7 v(/) = • L is known that 

(5.14) = (_l)°>-d3=iWi?,^)). 

Let S be a positive integer relatively prime to iV. By [20, Chapter 1, §6] and (2.1), for an integer 
a relatively prime to S, we have 

(5.15) [a/S]^ = ef[a'/S]^, 

where a' is an integer satisfying a'aN = —1 mod S. Let t be the map Q[G 5 ] ^ Q[Gs] 
sending a G Gs to a~^. We have a functional equation of Mazur-Tate elements as follows. 

Proposition 5.16. 

6s = ef6_l^i{6s). 
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Proof. We have 





where the equation (a) follows from (5.15). □ 

For 7 e G 5 , we have 

t(7 _ 1) = ^-1 _ 1 = -7-^(7 - 1) = -(7 - 1) mod lag. 

Then, we have i = —1 on Icg/Icg^ and similarly t = (—1)* on fort > 1. 

Theorem 5.17. We suppose that p does not divide 6N ■ |i7(Fp)| and the Galois 

representation Gq —)■ Autzp(Tp(£^)) is surjective. Let S be a square-free product of good 
primes i such that EiF^) [p] is isomorphic to Z/pZ or 0. Then, we have 

Os e /s;"'--'” c z,[G5l. 

In particular, ifp > te then 63 € 

Proof. By Corollary 5.15, we have 63 G If p < r^oo — 1 or r^oo = 0, then 

there is nothing to prove. Henee, we assume that 1 < r pOO < p, and then 63 ^ Iq^ ^ . We note 
that the group G 3 aets on ^/Ig7 trivially. Then, modulo ”, we have 

(5.16) 63 = ef5-_],i{e3) = SfSzU-ir^-'-^es = 

By thep-parity eonjeeture (ef. [ 8 , Theorem 1.4]), 

(_l)°rds=l(T(E,s)) _ 

Combining this with (5.14) and (5.16), we have 

2 d 3 = f) modJ;g°. 

Since 2 is assumed to be invertible in Zp, we conclude that 63 G fa^ ■ D 

6. Proof of the main result 

6.1. The order of vanishing. Let i? be a subring of Q in which the primes satisfying at least 
one of the following conditions are invertible: 

(1) p divides 6iV ■ |^(Fp) | 

(2) the Galois representation Gq —)■ Kuiz^{Tp{E)) is not surjective, 

( 3 ) p < te. 

For an integer S, we denote by Is the augmentation ideal of i?[Gs]. 
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Theorem 6.1. Let S be a square-free product of good primes i such that for each prime p 
not invertible in R, the module E{¥()\p\ is cyclic. Then, we have 

Os e Is""- 

Proof. For a prime p not invertible in R, we see that S satisfies the assumption of Theorem 
5.17, and then 9s G Zp (g)^ By Lemma 5.4, we eomplete the proof. □ 

Remark 6.2. For distinet primes p and i, the module E{¥i) [p] is isomorphie to 0, Z/pZ or 
(Z/pZ)®^. Furthermore, E{¥£)[p] = (Z/pZ)®^ if and only if i splits eompletely in Q(i7[p]). 
By Chebotarev’s density theorem, if the representation Gq —)■ Aut(i?[p]) is surjeetive, then the 
density of sueh primes i is equal to 1/1GL 2 (Fp) | = l/(p^ — 1) (p^ — p). Henee, if we denote by 
5r the density (if it exists) of primes i that satisfy the assumption of Theorem 6.1, then 

^ (p2-l)(p2-p) - ^ § (P^ - 1)(P= -P) 

Corollary 6.3. We assume that — 1) e R^, where i' ranges over all the split 

multiplicative primes. Let S be a square-free product of primes i as in Theorem 6.1 and split 
multiplicative primes. If b 2 ,R{S) denotes the number of primes ^ dividing S such that ^ — l G R^ 
and a£ = 2, then 

n ^ pE+sv{S)+b2^[i{S) 

hs ^ Is 


Proof. By Lemma 5.4, it suffiees to show that for eaeh prime p not invertible in R, 


( 6 . 1 ) 


9s G Ze 


j-rE+sp(S)+b2,RiS) 


We denote by S' the produet of the primes i dividing S sueh that i is either a split multiplieative 
prime, or a good prime with ae = 2 and f — 1 G We put Sq = S/S'. By Proposition 2.3 
(1), we have 

\e\S' J 

We note that for eaeh prime i\S', we have ^^(l) = 0, and then Pi{FTf^) G R- Henee, by 
Theorem 6.1, we have 7rs/So{0s) ^ ^ Sinee eaeh prime divisor i of S' satisfies 

f — 1 G by Lemma 5.2 we obtain (6.1). □ 


6.2. The leading coefficients. Let S be as in Theorem 6.1. Let p be a prime not invertible in 
R sueh that p f S'. As in Seetion 3, we denote by I%p the set of good primes i sueh that i = 1 
mod p. We then write S = £i ■ ■ ■ £s, where £ 1 , £ 2 ,... ,£n G ^p, and C+i, ■ ■ ■ ,£s ^ ^p- We put 
Si = £i ■ ■ ■ £n and S 2 = £n+i ■ ■ ■£s- We denote by 9^g^ the image of 9s in Z/pZ ^r /Is^~^^. 

Theorem 6.4. If 9^^ 7^ 0, then we have 

m[p] = 0, p\Jsi, p\Y[{a£-2). 

e\S2 
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Remark 6.5. By the relation between our 9s and the original Mazur-Tate element in [20], 
the same theorem for the leading coefficients considered in [20] also holds (cf. Section 2). 


Proof. Let Os^piTs and be as in Subsection 5.4. First, we assume that > 1. We 
denote by the image of 6*5p in Z/pZ 0 Then by Lemma 5.3, we have 

( 6 . 2 ) e'il ^ 0 . 

By applying Proposition 3.3 to X]7ers 3s *^7 using Corollary 5.13, we have 

^s,p = (cs, L>fc3s)(c^7/ - 1)^' ■ ■ ■ (^7/ - 

fc=(A:i,...,A:s)eZ®p 

By Lemma 5.1, 

(cs, - 1)^' ■ ■ ■ - 1)^" mod /rf+7 

ki-\ - 'rkn<rE 

For k such that ki + ■ ■ ■ + kn < te and kn+i = ■ • • = = 0, we have = Ng^D', where 

D' = ■ ■ ■ Df^\ We put S' = Cond(Zi)'). By applying Lemma 4.3 to the exact sequence 

0 —)■ E[p]) —)■ Sel(Q, i?[p]) (Be\s'E{Qe)/P: 

we have te < rp{Hjg,{Q, E[p\)) + rp(A(S")). By applying Theorem 4.18 to D'^Si^ we have 

loCp(L>35 modp) = loCp(iV52L>'3s mod p) = JJ P£(Fr7^)loCp(L>'35i mod p) 

qs2 

eHj{Q{S)<S)Qp,E[p]). 

Then, we have (c^, D^s) = 0 mod p, and hence 

9s,p = (^5, A3s)(a7/ - 1)"^ • ■ ■ (a,-/ - 1)'=^ mod pZp[rs] + Iff+7 

ki-\ - \-kn = r^ 

kn+l^---^ks=0 

By (6.2), there exists k such that ki + - \- kn = te, kn+i = • • ■ = = 0 and (c^, D^s) ^ 0 

mod p. For this k, if we let D' be as above, then loCp(P'3s'j mod p) ^ Hj{Q{Si) 0 Qp, E[p\). 
Since ord(i2') = r^;, by applying Corollary 4.19 to D'lsi, we have III[p] = 0 and the map 
P(Q)/p ©q5iP(Q7/pis surjective. Since©£|SiP(Q7/P - ©qsi^(F£)/pandpf 
the map 

E{Q) —)■ [(©£|5^P(F£)) © (©^|ArP(Q£)/Po(Q£))] 0Z/pZ 

is surjective, that is, p^ Jsi- Since r5^ acts on Egf /I trivially and 9si G we have 


(6.3) 


^s/s,(0s)= 

,qs2 


l[{ae - 2) I 9s, mod /^f+7 
,qs2 
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Since p f IG^I for £| 5 * 2 , by Lemma 5.3, the image of TTs/Sii^s) in Z/pZ® is not zero. 

Hence, by (6.3), we havep f ~ 

We assume that te = 0. By Proposition 2.3, we have 

(6.4) = I P[(a, - 2) j 9, = [ J](o, - 2) ] e R 

\£|S / \£|5 / 

Since 7 rs'/i( 6 * 5 ) ^ 0 mod p and 6 *i G R, we have ^ 0 mod p. By the work of Kolyvagin 
and Kato (cf. [25, Theorem 3.5.11]), we have III[p] = 0. The equation (6.4) also implies that 

(6.5) ptn(«^-2)- 

e\s 

Since te = 0 and i?(Q)[p] = 0, we have E{Q)/p = 0. We note that |i?(F£)| = 2 — for 
i e ^p. Then by (6.5), we have pf H^iSi and hence pf J^j. □ 

7. Trivial zeros 

By an elementary argument, we show that Mazur-Tate elements have trivial zeros induced 
by split multiplicative primes and by good primes for which the Hasse-invariant is equal to 
2. In this section, the Mordell-Weil rank is not involved, and we do not require divisibility of 
derivatives of Euler systems or the p-parity conjecture. 

Let /? be a subring of Q in which all the primes satisfying at least one of the conditions (i), 
(ii) in Subsection 1.2 are invertible. 

Theorem 7.1. For a square-free integer S' > 0 and b 2 {S) as above Proposition 5.10, 

^ j^v{S)+b 2 {S) 

Remark 7.2. In our setting. Theorem 7.1 implies Conjecture 1.1 when te = 0. Although 
Bergunde-Gehrman [1] has announced that they proved that Os G in the general case, 

zeros coming from good primes ^ with = 2 are not considered. 

Proof. We put a = sp(S') + 62 (*5'). By Lemma 5.4, it suffices to show that for each prime p 
not invertible in R, 

0 s e Zp ® 

If p f S', then by Lemma 5.2 and Corollary 5.13, it suffices to show that 0(3s) G Zp 0 Jp^, which 
follows from Proposition 5.10. In the case where pis', we have 

7rs/|(0s) = -FrpPp{Frf^)es/p. 

Since |Gp| G Z^, by the case above and Lemma 5.2, we complete the proof. □ 
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